{"id":82882,"date":"2025-10-15T18:39:54","date_gmt":"2025-10-15T18:39:54","guid":{"rendered":""},"modified":"2025-10-28T12:32:37","modified_gmt":"2025-10-28T18:32:37","slug":"cve-2025-54210-out-of-bounds-write-vulnerability-in-indesign-desktop","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-54210-out-of-bounds-write-vulnerability-in-indesign-desktop\/","title":{"rendered":"CVE-2025-54210: Out-of-Bounds Write Vulnerability in InDesign Desktop<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

InDesign Desktop, a widely used software for digital media creation, has been discovered to have a significant vulnerability, CVE-2025-54210. This flaw affects older versions of the software, specifically versions 20.4, 19.5.4, and earlier. The severity of this vulnerability, coupled with its potential for system<\/a> compromise or data leakage, makes it a critical issue that all users of InDesign Desktop should address promptly.
\nThis vulnerability is particularly dangerous because it can lead to arbitrary code execution<\/a>, a type of attack where an attacker can run arbitrary commands or code within the context of the current user. This could potentially give the attacker control over the victim’s system<\/a>, leading to serious security implications.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-54210
\nSeverity: High (CVSS:7.8)
\nAttack Vector: Local
\nPrivileges Required: None
\nUser Interaction: Required
\nImpact: Arbitrary code execution<\/a>, potential system compromise, or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n